
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
File: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft (raw, json)
Hash identifier: aXPrg6y2T0eQnateAqCDv5Eri4yiH+zpBHTfsaLjDmU=
Subject key identifier: E0:DB:1B:AE:3E:A3:E0:6C:DE:4F:C5:A4:82:7E:44:5F:AD:73:47:81
Authority key identifier: E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
Certificate issuer: /CN=A91A622F/serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Certificate serial: 2872
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
Manifest number: 2802
Signing time: Sun 20 Sep 2026 15:36:49 +0000
Manifest this update: Sun 20 Sep 2026 15:36:48 +0000
Manifest next update: Sun 27 Sep 2026 15:36:48 +0000
Files and hashes: 1: 4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl (hash: qwl3tMlT9YK3vSA0n30anWz+Ak7v3i7mUAx7mULlWSU=)
2: 253C821A388611ECBE8F7725C4F9AE02.roa (hash: msg45GhibqVfY+xRxDR7oBrJaU3IgBi5F9syEpc2quM=)
3: 6CED3FB2866C11F1879DBD6D59A30FBC.roa (hash: 7d89IoO7oSE4BWIA1+3nLNGX3bTaRyu/ngtSyVYUEVo=)
4: BCAE5314F75C11EB95BE8C87C4F9AE02.roa (hash: lki+CHXiL8jgebBM0y87J9S1Z38ejK6RVZBLe05r+fU=)
5: 54F4ED62A4D511EA863BC00AC4F9AE02.roa (hash: zy3egj4OMiHO48ljcoYfTBvfVuw49NEk7RLswgs1WQc=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 15:36:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10354 (0x2872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91A622F, serialNumber=E08AC5500E1FF18FD5D52B797C5097DD0AB94BE5
Validity
Not Before: Sep 20 15:36:48 2026 GMT
Not After : Sep 27 15:36:48 2026 GMT
Subject: CN=6aaffd90-a650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:54:ee:ef:7e:35:19:a3:de:80:c7:00:1d:87:
70:fb:2b:26:df:0c:98:9e:95:58:4e:a6:ba:a0:c6:
f0:51:e8:89:f0:54:94:51:9b:b3:97:b9:0f:1c:3f:
0f:a3:f5:f5:8a:42:e4:5c:e8:5b:e8:4b:c9:18:2c:
bd:d5:9d:0b:80:03:e7:03:5b:23:e8:5a:e0:4b:e8:
ea:42:19:3f:09:fd:94:e4:0d:66:b3:dc:f4:e3:d9:
f5:3a:0a:31:47:78:e0:28:0e:89:8f:b0:05:ca:e6:
0d:6c:26:f4:7a:4d:cb:11:b3:a6:1f:98:45:e1:31:
7d:54:ff:c9:19:b9:9d:0b:2f:08:ed:cc:81:37:99:
45:17:51:7c:89:02:b1:4b:d5:84:17:0a:2b:85:27:
85:49:dc:ed:64:a0:7f:68:4c:3b:e4:dd:44:90:c7:
78:25:ee:0f:ae:0a:67:db:41:13:25:b5:e7:4e:29:
b0:db:18:5f:17:f7:f1:61:67:5a:d4:3e:b5:f8:3f:
65:a4:11:e1:96:5c:22:a8:cb:87:5b:5b:68:e5:0e:
6b:4a:e6:56:1d:80:13:70:88:f1:f9:55:fd:0c:ea:
5e:c9:4a:d1:0d:0d:d9:fb:80:1f:bd:16:55:96:2c:
2b:d5:30:d9:2d:0f:c9:7f:02:dc:80:f0:7b:35:23:
2c:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:DB:1B:AE:3E:A3:E0:6C:DE:4F:C5:A4:82:7E:44:5F:AD:73:47:81
X509v3 Authority Key Identifier:
keyid:E0:8A:C5:50:0E:1F:F1:8F:D5:D5:2B:79:7C:50:97:DD:0A:B9:4B:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/697548C8DACC11E4A81ABE50C4F9AE02/4IrFUA4f8Y_V1St5fFCX3Qq5S-U.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
1c:47:2f:96:d2:12:08:ca:d7:81:ee:5a:a2:ea:27:d1:40:33:
39:b6:e0:9b:4c:d8:f8:27:2d:53:4a:13:79:1d:44:3b:1b:6d:
dc:f3:64:ac:a5:72:eb:4f:6f:e5:31:f0:1f:5f:16:fc:66:e8:
d0:f4:c5:7a:33:57:87:df:00:b6:f3:5d:2c:79:4e:47:26:13:
aa:d9:98:36:dc:ae:3a:ef:2c:94:3e:50:5d:b1:4b:8d:5f:2e:
b6:92:38:86:92:5d:0c:5e:c6:36:c5:ad:31:de:86:1c:e2:52:
6c:0a:e6:9c:11:06:01:68:6a:65:b4:7d:7c:91:aa:4d:1d:06:
b0:67:43:ad:fc:17:6f:6d:54:f9:1b:8e:d0:95:38:ac:46:bc:
00:55:3d:88:5e:19:01:7d:61:89:2c:b1:b1:84:e6:71:0c:8f:
ff:14:64:76:96:fc:c3:f5:70:3d:2f:04:c5:7f:08:da:62:36:
58:71:ec:f1:6c:96:2c:f2:96:8a:a4:fd:ab:bf:bd:fa:70:ae:
f4:a0:ba:aa:5d:2c:ab:08:48:9d:d2:34:e8:79:15:13:04:83:
91:06:07:a6:ff:31:47:7b:d7:d2:67:77:8e:ee:ec:82:3e:c6:
41:a0:b5:65:7c:f1:99:a5:f9:e9:25:86:ab:e1:03:8f:d5:e0:
42:b8:52:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:49:26 2026 by rpki-client